Penetration Testing Engineer (Remote-First)

Workstreet; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Career Development

Role-Related Training

Competitive Compensation

Growth Opportunity

Remote-First Culture

Job summary

Workstreet is seeking a Penetration Tester to join our growing cybersecurity team. You will assess the security of applications, networks, and systems through structured penetration testing and vulnerability assessments, delivering actionable remediation to strengthen client defenses.

You will collaborate with client engineers, write automated test scripts, and run targeted social engineering simulations. This role requires US ET hours, remote work flexibility, and strong English communication.

Qualifications

• Proven history of structured penetration testing across applications, networks and systems.
• Experience with cloud security assessments in AWS, GCP or Azure.
• Ability to translate findings into actionable remediation plans.

Responsibilities

• Execute comprehensive penetration tests across web, mobile, network and system environments.
• Produce high‑fidelity reports mapping exploit impact and remediation roadmaps.
• Collaborate with client engineering teams to guide post‑assessment remediation.
• Engineer testing scripts and automation tools to expand coverage.
• Deploy social engineering simulations to audit human security awareness.
• Support incident response loops with offensive security expertise.
• Maintain clear client communications and project milestones.
• Track evolving threats and update live assessment playbooks.

Skills

Offensive security

Penetration testing

Cloud security auditing

Threat modeling

Automation scripting

Social engineering simulations

Education

OSCP/CEH credentials

Job description

Workstreet is seeking a Penetration Tester to join our growing cybersecurity team. You will assess the security of applications, networks, and systems through structured penetration testing and vulnerability assessments, delivering actionable remediation to strengthen client defenses.

You will collaborate with client engineers, write automated test scripts, and run targeted social engineering simulations. This role requires US ET hours, remote work flexibility, and strong English communication.